MariaDB

Drop-in replacement for MySQL built by the original authors — extends core MySQL functionality with alternate storage engines, server optimizations, and patches.

Port	3306
Registry	ghcr.io/daemonless/mariadb
Source	https://github.com/MariaDB/server
Website	https://mariadb.org/

Version Tags

Tag	Description	Best For
10.11 / 10.11-pkg-latest	FreeBSD Latest. Rolling package updates.	Staying current.
11.4 / 11.4-pkg-latest	FreeBSD Latest. Rolling package updates.	Staying current.
11.8 / 11.8-pkg-latest	FreeBSD Latest. Rolling package updates.	Staying current.
12.3 / 12.3-pkg-latest / latest / pkg / pkg-latest	FreeBSD Latest. Rolling package updates.	Staying current.

Prerequisites

Before deploying, ensure your host environment is ready. See the Quick Start Guide for host setup instructions.

Deployment

Podman Compose

services:
  mariadb:
    image: "ghcr.io/daemonless/mariadb:latest"
    container_name: mariadb
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - MYSQL_ROOT_PASSWORD=changeme  # Root password (required on first run)
      - MYSQL_DATABASE=mydb  # Database to create on first run
      - MYSQL_USER=myuser  # User to create on first run
      - MYSQL_PASSWORD=mypassword  # Password for MYSQL_USER
    volumes:
      - "/path/to/containers/mariadb:/config"
    ports:
      - "3306:3306"
    # always (not unless-stopped) so FreeBSD's podman rc.d auto-starts it at boot
    restart: always

Save as compose.yaml, then run podman-compose up -d.

AppJail Director

.env:

# .env

DIRECTOR_PROJECT=mariadb
PUID=1000
PGID=1000
TZ=Etc/UTC
MYSQL_ROOT_PASSWORD=changeme
MYSQL_DATABASE=mydb
MYSQL_USER=myuser
MYSQL_PASSWORD=mypassword

appjail-director.yml:

# appjail-director.yml

options:
  - virtualnet: ':<random> default'
  - nat:
services:
  mariadb:
    name: mariadb
    options:
      - container: 'boot args:--pull'
      - expose: '3306:3306 proto:tcp'
    oci:
      user: root
      environment:
        - PUID: !ENV '${PUID}'
        - PGID: !ENV '${PGID}'
        - TZ: !ENV '${TZ}'
        - MYSQL_ROOT_PASSWORD: !ENV '${MYSQL_ROOT_PASSWORD}'
        - MYSQL_DATABASE: !ENV '${MYSQL_DATABASE}'
        - MYSQL_USER: !ENV '${MYSQL_USER}'
        - MYSQL_PASSWORD: !ENV '${MYSQL_PASSWORD}'
    volumes:
      - mariadb: /config
volumes:
  mariadb:
    device: '/path/to/containers/mariadb'

Makejail:

# Makejail

ARG tag=latest

OPTION overwrite=force
OPTION from=ghcr.io/daemonless/mariadb:${tag}

Save the files above, then run appjail-director up.

Note: Exposing ports in AppJail means that your service can be reached from remote hosts. If that is not your intention, do not expose the ports and communicate with the service using the IPv4 address assigned by the virtual network.

Podman CLI

podman run -d --name mariadb \
  -p 3306:3306 \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=Etc/UTC \
  -e MYSQL_ROOT_PASSWORD=changeme \
  -e MYSQL_DATABASE=mydb \
  -e MYSQL_USER=myuser \
  -e MYSQL_PASSWORD=mypassword \
  -v /path/to/containers/mariadb:/config \
  ghcr.io/daemonless/mariadb:latest

Save as run.sh, then run sh run.sh.

AppJail

appjail oci run -Pd \
  -o overwrite=force \
  -o container="args:--pull" \
  -o virtualnet=":<random> default" \
  -o nat \
  -o expose="3306:3306 proto:tcp" \
  -e PUID=1000 \
  -e PGID=1000 \
  -e TZ=Etc/UTC \
  -e MYSQL_ROOT_PASSWORD=changeme \
  -e MYSQL_DATABASE=mydb \
  -e MYSQL_USER=myuser \
  -e MYSQL_PASSWORD=mypassword \
  -o fstab="/path/to/containers/mariadb /config <pseudofs>" \
  ghcr.io/daemonless/mariadb:latest mariadb

Save as run.sh, then run sh run.sh.

Note: Exposing ports in AppJail means that your service can be reached from remote hosts. If that is not your intention, do not expose the ports and communicate with the service using the IPv4 address assigned by the virtual network.

Bastille

Warning

Bastille's OCI support is experimental. It requires buildah, shares the host network stack (inherit), and persists image-declared volumes under --data-path.

services:
  mariadb:
    image: "ghcr.io/daemonless/mariadb:latest"
    container_name: mariadb
    network_mode: host  # jail shares host networking
    environment:
      - PUID=1000
      - PGID=1000
      - TZ=Etc/UTC
      - MYSQL_ROOT_PASSWORD=changeme
      - MYSQL_DATABASE=mydb
      - MYSQL_USER=myuser
      - MYSQL_PASSWORD=mypassword

Save as podman-compose.yml, then run bastille up. Or via CLI:

bastille create -O \
  --env PUID=1000 \
  --env PGID=1000 \
  --env TZ=Etc/UTC \
  --env MYSQL_ROOT_PASSWORD=changeme \
  --env MYSQL_DATABASE=mydb \
  --env MYSQL_USER=myuser \
  --env MYSQL_PASSWORD=mypassword \
  --data-path /path/to/containers/mariadb \
  mariadb ghcr.io/daemonless/mariadb:latest inherit

Ansible

- name: Deploy mariadb
  containers.podman.podman_container:
    name: mariadb
    image: "ghcr.io/daemonless/mariadb:latest"
    state: started
    restart_policy: always
    env:
      PUID: "1000"
      PGID: "1000"
      TZ: "Etc/UTC"
      MYSQL_ROOT_PASSWORD: "changeme"
      MYSQL_DATABASE: "mydb"
      MYSQL_USER: "myuser"
      MYSQL_PASSWORD: "mypassword"
    ports:
      - "3306:3306"
    volumes:
      - "/path/to/containers/mariadb:/config"

Save as mariadb-deploy.yaml, then run ansible-playbook mariadb-deploy.yaml.

Parameters

Environment Variables

Variable	Default	Description
PUID	1000
PGID	1000
TZ	Etc/UTC
MYSQL_ROOT_PASSWORD	changeme	Root password (required on first run)
MYSQL_DATABASE	mydb	Database to create on first run
MYSQL_USER	myuser	User to create on first run
MYSQL_PASSWORD	mypassword	Password for MYSQL_USER

Volumes

Path	Description
/config	MariaDB configuration and data

Ports

Port	Protocol	Description
3306	TCP	MariaDB port

Architectures: amd64, aarch64 User: bsd (UID/GID via PUID/PGID, defaults to 1000:1000) Base: FreeBSD 15.1

---

Need help? Join our Discord community.